Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.

["Lise Moorveld" <lise_moorveld () hotmail com>]

Hi,

Well, technically these would be separate vulnerabilities, wouldn't you say?
Could you perhaps share a bit more information about which headers work well 
in circumventing which AV products?

-- Lise

> get the new updates at,
> http://www.geocities.com/visitbipin/crc.html
>
> strangely, after modifying other general purpose bit
> flag in the zip header like,compression method,last
> mod file time,last mod file date,file name
> length,extra field length... [NOT: compressed size, uncompressed size which 
> was
> pointed out by iDEFENSE before]
>
> strangely i found some other AV pron to the BUG.

_________________________________________________________________
Talk with your online friends with MSN Messenger http://messenger.msn.nl/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/